The Daily Index — Thursday, July 17, 2025 · TLDR Index

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

POPULAR FITNESS APP FITIFY EXPOSES 138K USER PROGRESS PHOTOS

Fitify, a popular fitness app, exposed 373,000 files, including 138,000 progress photos, via an unsecured Google Cloud storage bucket. Many of the photos showed users in minimal clothing, making the exposure highly sensitive. Additionally, private data was accessible without passwords or security keys, and the app contained hardcoded secrets that could have allowed attackers to access more user information.

links.tldrnewsletter.com · 3 min

TLDR InfoSec

MOBILE NOTARY ZONE SUFFERED A DATA BREACH

Mobile Notary Zone (MNZ), a third-party notary service vendor, reported a highly sensitive data breach. The compromised data includes full names and addresses, SSNs, dates of birth, government-issued IDs, bank account and payment details, loan, employment, and escrow data. The breach also affected clients served by MNZ, prompting at least one provider (New American Funding) to terminate its relationship with them.

calnotaries.org · 2 min

TLDR InfoSec

HOW TO PROTECT YOUR ROUTER FROM BEING HACKED AND BECOMING A RESIDENTIAL PROXY

Hackers target home routers to use as residential proxies, command-and-control servers, and botnets. Recent ASUS breaches demonstrate that backdoors can survive updates. These attacks often brute-force default passwords or exploit vulnerabilities, then install SSH backdoors. Defenses include disabling WAN management and SSH, changing default credentials, enabling automatic updates, and auditing configs for unauthorized access.

kaspersky.com · 7 min

TLDR InfoSec

KONFETY RETURNS: CLASSIC MOBILE THREAT WITH NEW EVASION TECHNIQUES

Android malware "Konfety" employs sophisticated evasion tactics, including dual-app deception (same package name for benign and malicious versions), ZIP-level tampering to break analysis tools, dynamic code loading with encrypted assets, stealth techniques such as icon hiding, and the use of the CaramelAds SDK for ad fraud.

zimperium.com · 5 min

TLDR InfoSec

FROM A TEAMS CALL TO A RANSOMWARE THREAT: MATANBUCHUS 3.0 MAAS LEVELS UP

Matanbuchus, a Malware-as-a-Service (MaaS) loader that has been active since 2021, has evolved to version 3.0 with enhanced capabilities. Recent campaigns have used Microsoft Teams impersonation and Quick Assist for deployment. Updates include improved communication protocols, in-memory stealth, enhanced obfuscation, indirect system calls, broader execution support, and enriched data collection targeting EDR controls.

morphisec.com · 15 min

TLDR InfoSec

THE FIPS 140-3 GO CRYPTOGRAPHIC MODULE

The Go programming language has introduced native FIPS 140-3 compliance support directly into its standard library and `go` command, starting with Go 1.24. Developers can enable FIPS 140-3 mode by setting the `fips140=on` GODEBUG option (either as an environment variable or in go.mod), and can build against validated cryptographic modules using `GOFIPS140=v1.0.0 go build`. This native integration eliminates the need for unsupported third-party solutions, providing a seamless developer experience with cross-compilation support and no performance overhead from foreign function interfaces.

go.dev · 6 min

TLDR InfoSec

DDOS PEAKS HIT NEW HIGHS: CLOUDFLARE MITIGATED MASSIVE 7.3 TBPS ASSAULT

Cloudflare blocked 7.3 million DDoS attacks in Q2 2025, including a record-breaking 7.3 Tb/s attack. Most attacks were small and brief, but intense attacks are increasing. Attackers are using increasingly powerful botnets and targeting new industries and countries.

securityaffairs.com · 3 min

TLDR InfoSec

SECURITY SHOP ADARMA CEASES TRADING, CONFIRMS IT WILL ENTER ADMINISTRATION

UK cybersecurity firm Adarma has entered administration, the UK equivalent of bankruptcy, after investor Livingbridge withdrew funding three months earlier due to major contract losses. All 173 employees were made redundant with immediate effect on July 14. The company struggled financially despite charging daily rates of £740-£2,380 and serving clients with a combined turnover of £150 billion.

theregister.com · 4 min

TLDR InfoSec

SALT TYPHOON BREACH: CHINESE APT COMPROMISES U.S. ARMY NATIONAL GUARD NETWORK

A Chinese state-sponsored hacking group known as Salt Typhoon breached a U.S. Army National Guard network, stealing sensitive data, including passwords and network diagrams.

securityaffairs.com · 4 min

TLDR InfoSec

GOOGLE FIXES ACTIVELY EXPLOITED SANDBOX ESCAPE ZERO DAY IN CHROME

Google patched CVE-2025-6558, a high-severity sandbox escape vulnerability in Chrome's ANGLE graphics layer that was actively exploited by attackers, marking the fifth zero-day Chrome fix in 2025.

bleepingcomputer.com · 2 min

TLDR InfoSec

UK RETAIL GIANT CO-OP CONFIRMS HACKERS STOLE ALL 6.5 MILLION CUSTOMER RECORDS

Co-op's CEO confirmed that hackers stole the personal data, including names, addresses, and contact details, of all 6.5 million customers during a cyberattack in April.

techcrunch.com · 2 min